$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: szZmNlLw+8QxQx1b47cVaQ8gGhrSFXSJJhxagWs7Ceo= Subject key identifier: C0:4F:32:01:99:A7:30:5D:C1:B4:BF:E4:6F:46:00:94:4E:DB:8D:7A Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 2C6C901096794C1E3E459AAB9764AA7A5A00412A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 09:55:32 +0000 Manifest this update: Mon 20 Oct 2025 09:50:32 +0000 Manifest next update: Tue 21 Oct 2025 12:28:32 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 3: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: Wrp1ZIKG1jq4Caz8opOlkIfzei5juNGLPsnd4ZqopcM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6c:90:10:96:79:4c:1e:3e:45:9a:ab:97:64:aa:7a:5a:00:41:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Oct 20 09:50:32 2025 GMT Not After : Oct 21 12:28:32 2025 GMT Subject: CN=C04F320199A7305DC1B4BFE46F4600944EDB8D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:a0:11:36:39:5a:34:cd:4b:18:6a:9b:52: 5b:c9:c1:c0:d3:ad:f3:1f:cf:38:47:8e:0f:66:fb: c3:0b:16:89:8e:36:45:17:f9:f3:7f:91:ec:38:e3: 18:de:f7:d5:6b:c1:b5:2c:80:72:b9:7a:9e:72:3e: ef:ce:4d:63:bc:a1:83:8e:bb:b6:c5:bc:3e:59:28: 92:03:0b:c3:55:85:ee:d3:8c:25:8d:b0:d3:c1:01: 6a:1e:e6:fc:ef:fa:24:41:d0:91:64:51:6d:83:c2: fe:f4:48:87:0f:77:6d:ff:17:ae:33:a4:e1:61:5d: 20:ff:2d:13:99:f8:21:0a:ca:31:52:40:5d:9e:91: 20:69:ea:14:65:a5:44:4d:08:f3:7a:b1:34:f1:89: 52:01:ed:63:12:dc:6a:68:a0:74:f9:09:23:87:14: 93:d8:00:db:8c:47:e4:6d:19:68:8e:82:e0:db:82: 44:c3:65:69:e8:b8:70:0a:40:ff:d3:33:9b:1a:0d: 89:66:26:5f:ca:8f:49:96:1d:2b:22:95:02:70:b1: ee:2c:78:57:56:af:a6:5a:f0:04:b1:5d:90:f4:b4: 15:de:cb:0d:1b:50:d9:39:69:14:d4:e5:3f:3d:6a: 64:b6:d4:23:a6:f5:02:53:4e:eb:d1:e9:a7:68:ef: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:32:01:99:A7:30:5D:C1:B4:BF:E4:6F:46:00:94:4E:DB:8D:7A X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:97:18:a7:64:a0:b1:05:d8:09:c5:84:8e:92:1c:98:ac:c0: fe:b0:32:67:3d:a2:16:6b:b5:d6:59:21:a7:50:e4:ed:b0:7d: 3c:b1:89:4c:02:71:f0:c3:8a:99:3a:9c:13:96:01:ae:d0:91: d2:40:e0:bc:1a:19:42:67:ad:54:24:bc:7c:7c:ff:e2:e7:4b: fb:a2:d6:dc:e2:ed:58:3d:b6:44:a0:44:d2:da:4b:5f:4f:43: 6e:92:fa:f9:62:93:74:52:9d:38:e2:91:e6:d6:e3:c6:89:af: a2:72:ee:d7:3a:1c:4a:d2:8e:22:de:ce:e9:96:90:9a:3e:10: 0b:a9:e6:d4:9b:af:74:0e:2a:51:38:a1:b4:4a:14:55:b3:9a: 6e:1f:a1:2f:b5:2c:97:64:da:40:67:07:7a:8e:18:a4:03:66: 33:94:96:cf:1f:93:ed:e3:e7:ea:59:fc:96:06:ba:7b:79:91: c8:d1:81:a9:e6:59:53:b9:b4:cc:11:35:aa:be:d5:79:87:48: 51:7f:6b:5d:8b:85:42:5b:a4:d0:97:f9:f6:ad:18:b8:d8:9e: d9:a2:ec:36:44:ec:37:6f:ef:0d:3c:28:06:88:4f:ad:bf:c9: 6a:6e:53:6a:87:ce:ae:35:04:27:b6:7b:bc:19:87:6a:27:cf: d0:69:f6:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULGyQEJZ5TB4+RZqrl2SqeloAQSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTEwMjAwOTUwMzJaFw0yNTEwMjExMjI4MzJaMDMxMTAvBgNV BAMTKEMwNEYzMjAxOTlBNzMwNURDMUI0QkZFNDZGNDYwMDk0NEVEQjhEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMY6ARNjlaNM1LGGqbUlvJwcDT rfMfzzhHjg9m+8MLFomONkUX+fN/kew44xje99VrwbUsgHK5ep5yPu/OTWO8oYOO u7bFvD5ZKJIDC8NVhe7TjCWNsNPBAWoe5vzv+iRB0JFkUW2Dwv70SIcPd23/F64z pOFhXSD/LROZ+CEKyjFSQF2ekSBp6hRlpURNCPN6sTTxiVIB7WMS3GpooHT5CSOH FJPYANuMR+RtGWiOguDbgkTDZWnouHAKQP/TM5saDYlmJl/Kj0mWHSsilQJwse4s eFdWr6Za8ASxXZD0tBXeyw0bUNk5aRTU5T89amS21COm9QJTTuvR6ado75cbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwE8yAZmnMF3BtL/kb0YAlE7bjXowHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALpcYp2SgsQXYCcWEjpIcmKzA/rAyZz2iFmu11lkhp1Dk7bB9PLGJTAJx8MOK mTqcE5YBrtCR0kDgvBoZQmetVCS8fHz/4udL+6LW3OLtWD22RKBE0tpLX09DbpL6 +WKTdFKdOOKR5tbjxomvonLu1zocStKOIt7O6ZaQmj4QC6nm1JuvdA4qUTihtEoU VbOabh+hL7Usl2TaQGcHeo4YpANmM5SWzx+T7ePn6ln8lga6e3mRyNGBqeZZU7m0 zBE1qr7VeYdIUX9rXYuFQluk0Jf59q0YuNie2aLsNkTsN2/vDTwoBohPrb/Jam5T aofOrjUEJ7Z7vBmHaifP0Gn2nw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:59 2025 by rpki-client